.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

Trying to Configure Kerberos

Posted By:      Posted Date: August 28, 2010    Points: 0   Category :Sql Server
Hello, I'm trying to configure Kerberos on a test environment. I have a Win2003 DC, a Win08 SQL 2008 machine, and a Win2003 client machine to test connectivity, with SSMS and ProClarity. Currently I have added the SPNs for MSSQLSVC and MSOLAP, and I'm trying to test connection using SSMS. From the client machine, I tried connecting to each server (DB Engine and OLAP), and checked the security log on the SQL machine to see the authentication method being used. The DB Engine connection seems to be working fine, having Kerberos all the time, yet for every time I connect to OLAP, I have two events entries first with NTLM, and then one with Kerberos. What does that mean? Is Kerberos not properly configured, or that's a normal behavior with SSAS? The Detailed Authentication Information for the events with NTLM, and the event with Kerberos are as follows: Logon Process: NTLMsp Authentication Package: NTLM Transited service: - Package Name (NTLM only): NTLM V1 Key Length: 128 -------------------------------------------- Detailed Authentication Information Logon Process: Kerberos Authentication Package: Kerberos Transited service: - Package Name (NTLM only): - Key Length: 0 -------------------------------------------- The SPNs added on the DC machine for the user used as service account for SSAS are as follows: MSOLAPSVC.4/BISQL08 MSOLAPSVC.4/BISQL08.BIDC.com   Thanks,

View Complete Post

More Related Resource Links

How to configure IIS 7.0 for ASP.NET Web Pages Razor


I'm working on a blog framework using ASP.NET Web Pages with Razor Syntax and I'm having some trouble with URL rewrites. My server is a Windows Server 2008, which runs IIS 7.0. WebMatrix is already installed on the server and .cshtml pages runs without problems, as long as they are named "index.cshtml" I don't have to supply the extension.

What does not work, is when I have URLs that does not correspond to physical files, e.g. website/post/why where the only physical file I have is post.cshtml. With IIS Express, the post.cshtml file is execute but on IIS 7.0 I get a 404 error.

Should I install the URL Rewrite for IIS 7.0? What configuration changes is required?

Configure Datasource using gridview problem


Hi i  have one asp.net textbox control..

and one dropdownlist inside gridview itemtemplate textbox..

what my problem..?

A Textbox36 has values some thing like this A1','A2','A3

i wirte this below query in sqldatasource1 and this sqldarasource1 is binded to gridview ItemTemplate Dropdownlist..

Select ItemName from Table1 where code in (@C)

Here @C im refering to Textbox36..

It show me the record if it has one value if its multiple like A1','A2','A3 it not showing/filtering ItemName data..

Whatz the probel?

Configuring website to ASP.NET 2.0 failed. You may need to manually configure this site for ASP.NET


I am trying to create a new website project in Visual Studio 2005, the website is an IIS website (ie. http://localhost/website1) and i get the following error message;

Configuring website to ASP.NET 2.0 failed. You may need to manually configure this site for ASP.NET 2.0 in order for your site to run correctly.

then when i try to debug the project i get the following error;

Unable to start debugging on the web server. The server does not support debugging of ASP.net or ATL server applications.

I am running Windows XP professional, with .NET 2.0 installed, and IIS V5.1

How can i get a simple website to debug on my machine?

Configure This: Parameterize Your Apps Using XML Configuration In The .NET Framework 2.0


There are a number of ways to configure an application in the .NET Framework 2.0. This article explores the classes of the revamped System.Configuration namespace and explains how to use XML configuration files for your app configuration settings.

Bryan Porter

MSDN Magazine June 2006

Security Briefs: Exploring S4U Kerberos Extensions in Windows Server 2003


Building Web sites that provide services external to the corporate firewall is tricky. Usually it's not desirable to grant corporate domain accounts to external clients, and from a purely practical standpoint Kerberos does not work well over the Internet due to the typical configuration of client-side firewalls.

Keith Brown

MSDN Magazine April 2003

Configure a module through IIS Manager?


I've developed a custom module with a custom configuration section.  Is there a way to create a plug-in or module so IIS Manager can manage the module?  I'm looking for the ability to enable or disable it by site as well as setup various configuration properties.

Configure My Site for Microsoft Office Pop up

I saw this on another post, but it still doesn't seem to have been resolved.

How do you disable this pop-up that reads

"Microsoft Office can remember your My Site to synchronize documents stored here in Outlook and to show it when opening and saving files. Do you want Office to remember this site (http://xxx/)? Only select 'yes' if you trust this site."

It stops appearing on certain pages, but for example this appears every time you click 'Add Colleagues' link in Colleagues.

Any help?

Cannot locate Tsneu.xml to Configure SharePoint Treasure (Synonym) In MOSS 2007


Hi all,

I wanna follow this article -> http://www.codeproject.com/Articles/36203/How-to-Configure-SharePoint-Treasure-Synonym-In-MO.aspx?msg=3038555 

to figure SharePoint Treasure (Synonym) In MOSS 2007.


I created the SSP for searching file, and my SSP guid is 7xxxxxx-xx etc., but in my MOSS 2007 server,  

I have this folder -> "Drive:\Program Files\Microsoft Office Servers\12.0\Data",

but no I haven't "Drive:\Program Files\Microsoft Office Servers\12.0\Data\Applications\" folder, so I cannot locate Tsneu.xml as above article.


I can find "tsneu.xml" file in following 4 folders, I don't know which file I should modify... 


Kerberos between MOSS 2007 and SSAS 2005


I realize this is probably going to be one of those vague questions that I am not going to get much help on here, but I thought I'd give this a shot before we go the MS Incident route on monday.

We have tried to setup Kerberos between MOSS 2007 AND SSAS 2005 to no avail.  We have been through the knowledge base articles outlining the setup multiple times with all the experts on MOSS and Security here where I work.  We've used other materials we have on kerberos here.  But the end result is that the double hop is not happening.  We are trying to connect three ways: excel services, ssrs 2005 in integrated mode, and Sharepoint KPI's (using analysis services).  In every case the connection is not happening.

Other details are that the ssrs integrated mode seems to be setup right because I do get a report (albiet all it has is a connection error message).  Excel services works fine if I use the unattended service account, but when I switch the odc file to windows (should cause kerberos to kick in) it fails.  When I try to add a kpi to the kpi list it can't retrieve a list of kpi's from ssas.

In all cases I am the user trying to perform these operations, and I have total access to the cube -- I'm the developer.  I have no problems connecting to the cube directly through excel, so the security at that end passes t

Configure BDC column to have multiple values selected


How do I Configure BDC column to have multiple values selected and make multiple entities data available in the same column.  Currently it supports only single value for an item.  This requirement is crucial need some solution immediately.

Kerberos issue with SQL Reporting Services 2005 on Server 2003 R2

Hi Guys,apologies if this is the incorrect forum, so moderators, feel free to move it to SQL/IIS/SharePoint as appropriate... [Windows Server Security moderator pushed me this direction]I have a test environment that I'm trying to get SQL Reporting Services 2005 SP3 working in integrated mode with SharePoint 2007 SP2.The environment is all in VMWare, running Server 2003 R2 x86 and is layed out like this:SERVER A:AD/DNS/DHCPSERVER B:SQL 2005 SP3 CU8SERVER C:SharePoint 2007 SP2 Dec 09 CU- Central admin on port 9000- SSP on port 9001- MySite on port 81- Main Content on port 80SQL Reporting Services 2005 SP3 CU8- Reporting Service website on port 82SERVER D:SharePoint 2007 SP2 Dec 09 CU- Central admin on port 9000- SSP on port 9001- MySite on port 81- Main Content on port 80SQL Reporting Services 2005 SP3 CU8- Reporting Service website on port 82Through the use of DNS and (SharePoint) Alternate Access Names, SERVER D is used to deliver the Main Content in SharePoint and the Reporting Service website.  SERVER C is used to deliver the Central Admin, SSP and MySite.I've set up SPN's for the SharePoint App Pools, using the following: [main content] setspn -S HTTP/SERVERA DOMAIN\AppPoolUserA setspn -S HTTP/SERVERA.FQDN DOMAIN\AppPoolUserA setspn -S HTTP/SERVERB DOMAIN\AppPoolUserA setspn -S HTTP/SERVERB.FQDN DOMAIN\AppPoolUserA [repor

How use WorkflowHostingEndpoint w/ existing Activity and no .xamlx + configure in web.config

The only examples I can find on hosting non-service workflows leveraging a custom WorkflowHostingEndpoint (CreationEndpoint example in Samples) still makes use of a .xamlx file and only shows configuring a host in code. I'd like to take an existing Activity, leverage something like CreationEndpoint, and configure the service exclusively in the web.config for hosting in IIS. I'd also like the service to expose a mex endpoint. Is this possible and if so can someone refer me to an example?Blades Don't Need Reloading...

How should I configure Asp.NET on IIS 6, Sql Server 2005 and SSRS 2005 across 2 Windows Server 2003

I was running a MIS reporting solution on a single server running MS Windows 2003 Server and Sql Server 2005. The solution was built using ASP.NET 2.0 on IIS 6.0, Sql Server DB & SSRS. I now have purchased a 2nd server running MS Windows 2003 Server and Sql Server 2005. What is the best configuration to split the following application components across the 2 physical servers? ASP.NET web application SQL Server 2005 Datawarehouse SSRS Web Applications (Reports & ReportServer) SSRS Databases (ReportServer & ReportServerTempDB) The hardware configuration of the 2 servers are as follows Server 1 MS Windows Server 2003 Enterprise Edition SP2 Intel(R) Xeon(R) CPU 5150 @2.66GHz 16 GB RAM Sql Server 2005 SP3 Standard Edition Smart Array P400 in Slot 1 (SAS Array A with Spare / SAS Array B with Spare) Drive C: 68.33 GB | Drive D: 273.40 GB Server 2 MS Windows Server 2003 Standard Edition SP2 Intel(R) Xeon(R) CPU X5570 @2.93GHz 4 GB RAM Sql Server 2005 SP3 Standard Edition IBM ServeRAID-MR10i SAS/SATA Controller Drive C: 135GB | Drive D: 556 GB | Drive E: 271 GB Any suggestions would be of great help

General question steps to configure mysites in SharePoint 2010

I am trying to configure the mysite web application, so I have created a DNS record "mysite" and created a web application for the mysite and created a mysite host site collection on it. Now I have read somewhere that u have to create managed paths for the profile and the mysite, which actually corresponds with the name of the DNS record/mysite webapp. For some reason when i am opening the mysite, i get a url something like http://my/my. What am i doing wrong? Can somebody just give me a step by step approach on how to configure Mysites in MOSS 2010?I am a SharePoint Infrastructure Engineer, focussed on Administration and Installation of SharePoint Server environments.

Claims won't take Kerberos

So, we want to use Claims authentication and Kerberos when creating web applications in SharePoint 2010. Now this is easy to set up in central admin, but we struggle doing it using powershell: New-SPWebApplication -Name Testing123 -ApplicationPool SharePointApplicationAppPool -AuthenticationProvider (New-SPAuthenticationProvider) -AuthenticationMethod Kerberos results in CLAIMS using NTLM. It seems like -AuthenticationProvider (New-SPAuthenticationProvider) is forcing NTLM, and -AuthenticationMethod Kerberos is not taken into consideration. And the New-SPAuthenticationProvider does not have an -AuthenticationMethod parameter, so how can we get Claims with Kerberos? Any tips appreciated!

Windows 2008 R2 kerberos authentication

Hi i have install windows 200R2 with blackpearl but i have this issue with Kerberos Authentication the same account when using ie8 on the local machine allows me to login while the same credientials using ie7 & ie8 on remote machine will keep prompting for credentials; any advise on this?
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend